$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929/eeb9b95d-537b-3c2d-9916-d8ff80136219.roa File: eeb9b95d-537b-3c2d-9916-d8ff80136219.roa (raw, json) Hash identifier: X/AQdjg2wsJH2Q4P92vRi+l6yjSEha9uKbX/GkeAPEE= Subject key identifier: C2:12:4A:92:49:61:F2:3E:CF:1E:EF:8D:63:99:E9:20:DF:4A:95:06 Certificate issuer: /CN=86df6a19-205b-4b89-a388-4d42d6203929 Certificate serial: 010D0C9F4328584F93C67C57321AC46F75E4DF80 Authority key identifier: 6F:BE:4C:DA:2E:B2:92:15:64:B0:CC:86:61:1C:D1:8E:33:E8:38:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929/eeb9b95d-537b-3c2d-9916-d8ff80136219.roa Signing time: Wed 21 Oct 2026 15:59:12 +0000 ROA not before: Wed 21 Oct 2026 15:59:12 +0000 ROA not after: Tue 19 Jan 2027 16:59:12 +0000 asID: 36815 IP address blocks: 208.67.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929/86df6a19-205b-4b89-a388-4d42d6203929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929/86df6a19-205b-4b89-a388-4d42d6203929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:93:c6:7c:57:32:1a:c4:6f:75:e4:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86df6a19-205b-4b89-a388-4d42d6203929 Validity Not Before: Oct 21 15:59:12 2026 GMT Not After : Jan 19 16:59:12 2027 GMT Subject: CN=16919296-0d51-4bae-af5a-a815aa898b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:98:83:60:57:28:9e:9a:99:f6:ef:db:00: 18:24:c5:c3:e3:0e:d2:d8:df:0e:6b:fb:e5:82:83: 86:f0:10:f0:cd:27:1f:c5:b7:53:aa:ad:53:ac:36: 11:cb:0b:4b:f5:bc:f0:7b:1b:45:ba:af:b1:e5:f2: 4f:f3:50:7e:34:44:a4:de:4e:e5:b4:b1:59:66:b3: 5b:ed:6d:89:15:a9:6a:c8:18:d6:47:17:94:f0:8e: 15:42:71:a5:d9:ad:5f:d3:d9:12:61:69:5e:cd:bd: 05:e6:d5:fa:a9:1a:e1:75:8a:3e:b6:34:14:1d:00: 6e:42:3a:2f:b1:bd:2e:61:21:29:f8:8a:84:46:98: c0:38:80:81:7d:d8:a3:0a:ae:a7:55:83:c8:6b:a6: 66:b0:ab:d9:86:83:8e:6d:fc:a6:53:52:df:e9:9e: 08:78:3a:79:c8:4f:62:25:ca:ee:db:7e:8f:d4:e1: f6:95:2c:8c:bc:ca:f7:65:09:64:f1:ef:2c:29:17: 20:45:90:8c:1f:c0:d7:10:42:63:d4:b3:19:14:ee: 65:53:12:82:e2:72:32:93:b5:60:47:aa:c6:1c:ba: cf:a1:f5:69:63:86:7b:48:79:c7:86:41:f3:01:6b: d4:c7:d3:b6:4d:e2:4a:c3:cb:ad:ea:c6:ad:fd:ff: db:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:12:4A:92:49:61:F2:3E:CF:1E:EF:8D:63:99:E9:20:DF:4A:95:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929/eeb9b95d-537b-3c2d-9916-d8ff80136219.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929/86df6a19-205b-4b89-a388-4d42d6203929.crl X509v3 Authority Key Identifier: keyid:6F:BE:4C:DA:2E:B2:92:15:64:B0:CC:86:61:1C:D1:8E:33:E8:38:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/86df6a19-205b-4b89-a388-4d42d6203929.cer sbgp-ipAddrBlock: critical IPv4: 208.67.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6b:99:c1:e5:df:95:0c:73:98:0f:94:ff:9c:79:31:41:40: 30:cd:51:88:5e:d6:aa:c1:8f:b4:b9:2b:f8:67:e8:90:cb:0f: b6:d0:d6:4c:ef:55:73:00:f8:4a:57:2f:2d:7b:09:ca:f6:e8: 6c:26:c7:48:bd:b0:da:41:28:bc:61:a6:96:aa:bf:4e:a6:ea: 71:70:6b:0e:65:9f:fb:9a:53:1d:b9:02:7c:51:e5:a6:96:70: e1:aa:4b:65:13:98:08:ae:84:81:87:62:00:91:b8:86:74:ff: ac:19:41:c0:24:46:71:94:f4:6c:5f:54:c6:cb:c6:20:31:99: 5e:31:8b:9e:47:ab:cb:a7:c4:b1:00:62:f2:69:bc:f3:cc:b6: aa:a2:fe:41:bd:2f:e5:a7:06:bc:a9:f8:ad:4b:f4:53:61:2d: 45:46:54:6c:47:d8:c1:dc:f7:d8:40:71:74:6c:a4:e7:cb:1a: 2d:42:7c:30:06:e4:31:d5:ef:75:30:da:7f:5a:6f:46:6d:1f: da:5e:ea:a0:a4:87:00:2d:67:0d:b2:42:43:d4:05:34:4b:4d: ac:33:80:5c:58:27:3b:f4:26:58:d4:fe:3e:1a:76:24:87:36: 4b:03:34:61:2b:35:5d:1a:66:98:ad:ae:ba:ee:31:93:25:6d: b7:7d:a5:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+TxnxXMhrEb3Xk34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZkZjZhMTktMjA1Yi00Yjg5LWEzODgtNGQ0MmQ2MjAz OTI5MB4XDTI2MTAyMTE1NTkxMloXDTI3MDExOTE2NTkxMlowLzEtMCsGA1UEAxMk MTY5MTkyOTYtMGQ1MS00YmFlLWFmNWEtYTgxNWFhODk4YjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGCYg2BXKJ6amfbv2wAYJMXD4w7S2N8Oa/vl goOG8BDwzScfxbdTqq1TrDYRywtL9bzwextFuq+x5fJP81B+NESk3k7ltLFZZrNb 7W2JFalqyBjWRxeU8I4VQnGl2a1f09kSYWlezb0F5tX6qRrhdYo+tjQUHQBuQjov sb0uYSEp+IqERpjAOICBfdijCq6nVYPIa6ZmsKvZhoOObfymU1Lf6Z4IeDp5yE9i Jcru236P1OH2lSyMvMr3ZQlk8e8sKRcgRZCMH8DXEEJj1LMZFO5lUxKC4nIyk7Vg R6rGHLrPofVpY4Z7SHnHhkHzAWvUx9O2TeJKw8ut6sat/f/bTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMISSpJJYfI+zx7vjWOZ6SDfSpUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS84NmRm NmExOS0yMDViLTRiODktYTM4OC00ZDQyZDYyMDM5MjkvZWViOWI5NWQtNTM3Yi0z YzJkLTk5MTYtZDhmZjgwMTM2MjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvODZkZjZhMTktMjA1Yi00Yjg5LWEz ODgtNGQ0MmQ2MjAzOTI5Lzg2ZGY2YTE5LTIwNWItNGI4OS1hMzg4LTRkNDJkNjIw MzkyOS5jcmwwHwYDVR0jBBgwFoAUb75M2i6ykhVksMyGYRzRjjPoOOMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS84NmRmNmExOS0yMDViLTRiODktYTM4OC00ZDQy ZDYyMDM5MjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EMIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVrmcHl35UMc5gPlP+ceTFBQDDNUYhe1qrBj7S5K/hn6JDLD7bQ1kzv VXMA+EpXLy17Ccr26Gwmx0i9sNpBKLxhppaqv06m6nFwaw5ln/uaUx25AnxR5aaW cOGqS2UTmAiuhIGHYgCRuIZ0/6wZQcAkRnGU9GxfVMbLxiAxmV4xi55Hq8unxLEA YvJpvPPMtqqi/kG9L+WnBryp+K1L9FNhLUVGVGxH2MHc99hAcXRspOfLGi1CfDAG 5DHV73Uw2n9ab0ZtH9pe6qCkhwAtZw2yQkPUBTRLTawzgFxYJzv0JljU/j4adiSH NksDNGErNV0aZpitrrruMZMlbbd9pRE= -----END CERTIFICATE-----Generated at Sun Nov 1 14:37:27 2026 by rpki-client